Nokia Phones Firmware MMC Local Authentication Bypass Vulnerability

Bugtraq ID:	20003
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Sep 13 2006 12:00AM
Updated:	Sep 14 2006 07:22PM
Credit:	The Hackers Choice is credited with the discovery of this issue.
Vulnerable:	Nokia Mobile Phones 0
Not Vulnerable:

Nokia Phones Firmware MMC Local Authentication Bypass Vulnerability

Nokia Mobile Phones are prone to an authentication-bypass vulnerability due to a design error.

Successful exploits may allow an attacker with local access to a vulnerable mobile device to bypass the application's authentication methods and gain full access to the affected device.

We currently have no information regarding specific details of the affected devices. This BID will be updated when more information becomes available.

Nokia Phones Firmware MMC Local Authentication Bypass Vulnerability

An attacker must have physical access to a vulnerable device to exploit this issue.

Nokia Phones Firmware MMC Local Authentication Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Nokia Phones Firmware MMC Local Authentication Bypass Vulnerability

References:

• Nokia Homepage (Nokia)